Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          r/SE9JKTC7dEHkCKHm0/LaDPrvkWiNwVMxLQR7UhfGA=
Subject key identifier:   DA:AB:6F:65:F1:7B:06:00:A7:C2:D3:68:B5:84:0F:4B:DB:A1:EF:13
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       0198816867716753C09025820E9F362EF6FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          0725
Signing time:             Wed 06 Aug 2025 22:02:39 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:39 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:39 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: PQX/qbMclqSpZ+bdDqlUqZY7YEhxW4EWX9o8Kw8uqkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:67:71:67:53:c0:90:25:82:0e:9f:36:2e:f6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: Aug  6 22:02:39 2025 GMT
            Not After : Aug  7 22:02:39 2025 GMT
        Subject: CN=daab6f65f17b0600a7c2d368b5840f4bdba1ef13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:ff:1b:ea:fa:35:fc:42:29:46:7c:b7:a3:
                    d0:d7:4c:7e:2c:19:b5:4e:1a:61:e8:27:78:1c:51:
                    df:6e:7c:f0:82:07:98:a1:58:a3:74:43:d0:d2:61:
                    d6:73:88:f9:61:e8:84:2e:e3:e5:b8:c0:d3:db:03:
                    d0:14:05:e6:a6:48:92:a7:ab:d3:d9:b0:1a:b0:de:
                    50:06:15:34:88:61:8f:21:18:0d:00:5d:af:78:d2:
                    6f:e1:25:16:7a:23:86:ed:56:9c:f8:98:6f:41:32:
                    db:c1:ee:72:f4:10:76:e1:e2:f5:58:06:7e:c9:a3:
                    57:e7:1d:ae:07:4d:db:1b:c3:63:5e:49:53:20:ff:
                    e1:be:df:6a:80:50:1c:c6:af:1e:06:22:31:b7:2b:
                    80:48:c8:91:80:e1:f3:ae:9f:f7:30:4b:c8:b9:b8:
                    c1:3e:7f:b6:d7:36:ea:13:aa:36:e1:f7:bf:94:51:
                    a7:76:79:e8:e8:9e:d1:c9:85:56:2e:55:4b:b2:00:
                    70:2c:70:5a:a7:e1:ef:74:5c:45:61:b4:72:20:da:
                    0c:0b:a6:0b:f2:cf:70:bc:d9:94:2b:c8:3b:b6:d8:
                    df:cf:28:a5:44:fc:83:b1:66:2d:4d:fc:86:1a:7e:
                    03:bc:e8:df:1a:47:34:41:17:d7:63:83:3a:7a:17:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AB:6F:65:F1:7B:06:00:A7:C2:D3:68:B5:84:0F:4B:DB:A1:EF:13
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:53:73:8f:22:dc:ef:41:a1:cc:cf:6a:9b:7e:2c:1b:93:
         71:8a:e1:a5:82:a0:ba:56:cf:7c:b0:77:19:56:a0:74:02:3b:
         2a:f0:6b:cb:9c:05:6e:f1:73:f4:28:72:a0:07:c3:a8:db:9c:
         98:5f:da:53:7e:d8:90:d6:04:d6:ce:74:48:1b:81:c0:4b:c9:
         ff:75:35:e8:ee:d0:8d:aa:54:7e:25:55:10:d9:ad:ce:45:99:
         2a:34:96:af:fb:71:9f:b9:0a:e4:e2:6f:f9:b1:38:ae:1a:12:
         4a:02:50:c9:a4:61:3d:ce:76:81:98:2f:b9:dc:2b:e5:41:47:
         e5:c2:fa:b4:d6:58:d1:db:05:aa:51:20:cd:af:64:ba:da:70:
         94:bc:6b:6e:92:9f:08:e6:4f:79:d7:6b:c6:db:78:18:39:5a:
         d1:56:b1:5f:a5:65:1a:5a:69:f1:70:42:03:cf:49:7a:a1:7b:
         f0:9c:de:90:10:86:4a:37:a1:e2:05:45:7d:33:ef:02:e8:5b:
         45:57:95:7a:e2:1e:4c:16:a8:b7:fd:4f:0c:02:f4:f3:87:fc:
         64:31:9c:42:f0:57:a9:34:5c:d1:46:e6:86:7b:c9:a2:c8:d2:
         9a:75:a7:ef:e6:75:18:e9:9a:e8:93:ae:40:5d:68:8d:ea:7e:
         3e:71:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:18 2025 by rpki-client